VULNERABILITY INTELLIGENCE

CVE-2015-7527

CVSS score7.5 HIGH
EPSS probability5.23%
CISA KEVNot currently listed
Published2015-12-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references